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CLAIMS 

[0056] I claim: 

1 . A lookup method for use in a switch, comprising the steps of: 
5 parsing a packet header to obtain a plurality of data fields; 

selecting at least one of said plurality of data fields as a protocol identifier and 
using said protocol identifier to directly access a Server Flow Table start pointer 
(sFlowRTP); 

performing a first lookup using said sFlowRTP and using one or more of said data 
1 0 fields as a first key to determine a Client Flow Table start pointer (cFlowRTP); 

performing a second lookup using said cFlowRTP and using one or more of said 
data fields as a second key to obtain a flow entry; and 
switching said packet using said flow entry. 

2. The method of Claim 1 , wherein said first lookup or said second lookup is 
1 5 performed in a Patricia tree. 

3. The method of Claim 1 , wherein said first lookup or said second lookup utilizes a 
content addressable memory. 

4. The method of Claim 3 , wherein said content addressable memory further 
comprises a ternary content addressable memory. 
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5. The method of Claim 1, wherein said direct access, said first lookup, and said 
second lookup are pipelined. 

6. The method of Claim 1 , wherein for packets arriving at a plurality of ports, at least 
said selecting, said performing said first lookup, and said performing said second lookup 

5 are time division multiplexed. 

7. The method of Claim 1 , further comprising: 

validating said sFlowRTP prior to performing said first lookup; 
validating said cFlowRTP prior to performing said second lookup; and 
validating said flow entry prior to performing said switching. 

10 

8. A computer switching system, comprising computer instructions for: 
parsing a packet header to obtain a plurality of data fields; 

selecting at least one of said plurality of data fields as a protocol identifier and 
using said protocol identifier to directly access a Server Flow Table start pointer 
15 (sFlowRTP); 

performing a first lookup using said sFlowRTP and using one or more of said data 
fields as a first key to determine a Client Flow Table start pointer (cFlowRTP); 

performing a second lookup using said cFlowRTP and using one or more of said 
data fields as a second key to obtain a flow entry; and 
20 switching said packet using said flow entry. 

9. The switching system of Claim 8, wherein said first lookup or said second lookup 
is performed in a Patricia tree. 
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1 0. The switching system of Claim 8, wherein said first lookup or said second lookup 
utilizes a content addressable memory. 

1 1 . The switching system of Claim 1 1 , wherein said content addressable memory 
further comprises a ternary content addressable memory. 

5 12. The switching system of Claim 8, wherein said direct access, said first lookup, 
and said second lookup are pipelined. 

1 3 . The switching system of Claim 8 , wherein for packets arriving at a plurality of 
ports, at least said selecting, said performing said first lookup, and said performing said 
second lookup are time division multiplexed. 

10 14. The switching system of Claim 8, further comprising: 

validating said sFlowRTP prior to performing said first lookup; 
validating said cFlowRTP prior to performing said second lookup; and 
validating said flow entry prior to performing said switching. 

15 15. A computer-readable medium storing a computer program executable by a 
computer, the computer program comprising computer instructions for: 
parsing a packet header to obtain a plurality of data fields; 
selecting at least one of said plurality of data fields as a protocol identifier and 
using said protocol identifier to directly access a Server Flow Table start pointer 
20 (sFlowRTP); 
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performing a first lookup using said sFlowRTP and using one or more of said data 
fields as a first key to determine a Client Flow Table start pointer (cFlowRTP); 

performing a second lookup using said cFlowRTP and using one or more of said 
data fields as a second key to obtain a flow entry; and 
5 switching said packet using said flow entry. 

16. The computer-readable medium of Claim 1 5 , wherein said first lookup or said 
second lookup is performed in a Patricia tree. 

17. The computer-readable medium of Claim 15, wherein said first lookup or said 
second lookup utilizes a content addressable memory. 

10 18. The computer-readable medium of Claim 1 9, wherein said content addressable 
memory further comprises a ternary content addressable memory. 

1 9. The computer-readable medium of Claim 15, wherein said direct access, said first 
lookup, and said second lookup are pipelined. 

20. The computer-readable medium of Claim 15, wherein for packets arriving at a 
1 5 plurality of ports, at least said selecting, said performing said first lookup, and said 

performing said second lookup are time division multiplexed. 

2 1 . The computer-readable medium of Claim 1 5 , further comprising: 
validating said sFlowRTP prior to performing said first lookup; 
validating said cFlowRTP prior to performing said second lookup; and 

20 validating said flow entry prior to performing said switching. 
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22. A computer data signal embodied in a carrier wave, comprising computer 
instructions for: 

parsing a packet header to obtain a plurality of data fields; 

selecting at least one of said plurality of data fields as a protocol identifier and 
using said protocol identifier to directly access a Server Flow Table start pointer 
(sFlowRTP); 

performing a first lookup using said sFlowRTP and using one or more of said data 
fields as a first key to determine a Client Flow Table start pointer (cFlowRTP); 

performing a second lookup using said cFlowRTP and using one or more of said 
data fields as a second key to obtain a flow entry; and 

switching said packet using said flow entry. 

23. The computer data signal of Claim 22, wherein said first lookup or said second 
lookup is performed in a Patricia tree. 

24. The computer data signal of Claim 22, wherein said first lookup or said second 
lookup utilizes a content addressable memory. 

25. The computer data signal of Claim 27, wherein said content addressable memory 
further comprises a ternary content addressable memory. 

26. The computer data signal of Claim 22, wherein said direct access, said first 
lookup, and said second lookup are pipelined. 
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27. The computer data signal of Claim 22, wherein for packets arriving at a plurality 
of ports, at least said selecting, said performing said first lookup, and said performing 
said second lookup are time division multiplexed. 

28. The computer data signal of Claim 22, further comprising: 

5 validating said sFlowRTP prior to performing said first lookup; 

validating said cFlowRTP prior to performing said second lookup; and 
validating said flow entry prior to performing said switching. 



29. A computer switching system comprising: 
1 0 means for parsing a packet header to obtain a plurality of data fields; 

means for selecting at least one of said plurality of data fields as a protocol 
identifier and using said protocol identifier to directly accessing a Server Flow Table start 
pointer (sFlowRTP); 

means for performing a first lookup using said sFlowRTP and using one or more 
15 of said data fields as a first key to determine a Client Flow Table start pointer 
(cFlowRTP); 

means for performing a second lookup using said cFlowRTP and using one or 
more of said data fields as a second key to obtain a flow entry; and 
means for switching said packet using said flow entry. 

20 30. The method of Claim 29, wherein said means for performing said first lookup or 
said second lookup comprise a Patricia tree. 
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3 1 . The method of Claim 29, wherein said means for performing said first lookup or 
said second lookup comprise a content addressable memory. 

32. The method of Claim 29, wherein said means for directly accessing and said 
means for performing said first lookup and said second lookup are pipelined. 

5 33. The method of Claim 29, wherein for packets arriving at a plurality of ports, at 
least said means for selecting, said means for performing said first lookup, and said 
means for performing said second lookup are time division multiplexed. 

34. The method of Claim 29, further comprising: 

means for validating said sFlowRTP prior to performing said first lookup; 
10 means for validating said cFlowRTP prior to performing said second lookup; and 

means for validating said flow entry prior to performing said switching. 

35. A lookup method for use in a switch, comprising the steps of: 
parsing a packet header to obtain a plurality of data fields; 

1 5 selecting at least one of said plurality of data fields as a protocol identifier; 

performing a server flow lookup using said protocol identifier and one or more of 
said data fields to determine said Client Flow Table start pointer (cFlowRTP); 

performing a second lookup using said cFlowRTP and using one or more of said 
data fields as a second key to obtain a flow entry; and 
20 switching said packet using said flow entry. 
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